Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/CbHccgKqK0BrrVn3bFRUvV_0XKo.roa
File: CbHccgKqK0BrrVn3bFRUvV_0XKo.roa (raw, json)
Hash identifier: 9vOb+buXVYUOOQ0s7ot5h3Cm2iuEZfug/ieoxVxIlYg=
Subject key identifier: 09:B1:DC:72:02:AA:2B:40:6B:AD:59:F7:6C:54:54:BD:5F:F4:5C:AA
Certificate issuer: /CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56
Certificate serial: 0185706754C242518CD69DB8C1F0A83FE874
Authority key identifier: 51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/CbHccgKqK0BrrVn3bFRUvV_0XKo.roa
Signing time: Mon 02 Jan 2023 02:54:58 +0000
ROA not before: Mon 02 Jan 2023 02:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20509
IP address blocks: 193.178.232.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:54:c2:42:51:8c:d6:9d:b8:c1:f0:a8:3f:e8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56
Validity
Not Before: Jan 2 02:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09b1dc7202aa2b406bad59f76c5454bd5ff45caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:29:06:50:b1:f2:9e:01:f8:f0:ab:db:7a:
1f:63:5c:17:bd:58:e2:88:b2:b0:0e:42:d3:c3:8f:
9b:8c:49:e9:a3:e3:06:f3:5f:64:e4:e5:5f:ee:a6:
ac:92:50:53:9a:ca:50:57:90:d0:c0:32:cd:97:cf:
31:25:ba:df:ab:d0:66:0e:46:7d:c3:85:49:d2:77:
b0:65:16:64:9a:8a:64:e6:c5:8f:15:4c:3e:56:f1:
55:1e:10:03:95:52:c1:cc:8c:d0:9f:74:55:7c:d6:
99:98:a6:f7:0e:f9:78:63:6e:f5:e8:8b:21:e1:9c:
ee:07:36:03:74:47:10:9a:13:f1:82:68:dd:68:53:
13:4f:58:a8:03:3b:2b:79:bc:2f:54:6e:07:60:a7:
ef:90:c9:98:80:69:5f:30:5e:4d:a3:a5:47:4d:05:
74:25:5d:a5:1a:b7:84:49:77:bb:b2:3a:c0:ee:87:
2d:82:28:3d:1f:75:30:fe:57:19:48:fa:40:dd:b6:
e9:28:2e:61:8e:93:bc:a4:26:f8:e9:b0:f3:6d:07:
cc:88:38:93:68:2c:f6:86:3c:87:72:53:ec:72:2c:
af:7e:4e:f0:f5:85:74:cd:f3:53:bf:a1:59:e5:17:
76:7b:75:75:64:49:e2:70:a7:34:aa:2f:4d:6e:0f:
9e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B1:DC:72:02:AA:2B:40:6B:AD:59:F7:6C:54:54:BD:5F:F4:5C:AA
X509v3 Authority Key Identifier:
keyid:51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/CbHccgKqK0BrrVn3bFRUvV_0XKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.232.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:b1:c0:82:bf:67:4d:31:a0:a9:19:1a:7c:fe:04:bb:88:fd:
0f:0a:88:c9:df:3e:53:67:b1:f0:41:3e:69:e2:2f:b2:d8:9d:
c8:e9:75:0b:b9:98:28:9e:98:bb:53:ee:d1:98:34:c3:b8:5b:
68:2b:c0:8e:65:b2:45:ea:2b:26:8f:19:de:a9:20:5f:02:68:
49:3c:b3:fd:8a:0a:47:d1:4b:f2:8b:1c:50:67:17:dc:c7:b2:
ee:50:5d:94:73:a8:86:a3:4a:11:87:71:8c:a4:7a:c0:38:a9:
e5:eb:9d:19:f8:34:dc:48:a7:8f:a0:a5:94:97:e7:ea:ee:3a:
82:7f:fc:16:f7:42:15:aa:f0:88:45:db:1d:a4:44:15:33:94:
83:a7:eb:db:32:c5:6f:eb:6a:ee:42:50:77:ec:1d:40:21:93:
18:c2:c1:ab:39:cf:76:7d:c8:ec:6e:a8:c2:2d:b2:e2:4d:31:
2a:2b:ad:e5:7c:18:a8:ab:d7:09:79:5d:c9:84:77:ed:7a:90:
a1:c0:d6:61:35:72:39:82:53:e1:e4:e2:74:5d:0e:99:50:22:
56:fd:da:da:78:3b:42:96:53:e1:64:b0:59:98:52:a7:d4:3a:
a9:a4:f0:4e:c6:b2:7a:d7:df:06:dc:26:cf:ba:75:3d:49:65:
da:27:ef:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZ1TCQlGM1p24wfCoP+h0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZGEzZDMyNTk3YjUwNTE5MzJmNmNhOTE4MmQ0YjlhMmZi
MDViNTYwHhcNMjMwMTAyMDI1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWIxZGM3MjAyYWEyYjQwNmJhZDU5Zjc2YzU0NTRiZDVmZjQ1Y2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6wpBlCx8p4B+PCr23ofY1wXvVji
iLKwDkLTw4+bjEnpo+MG819k5OVf7qasklBTmspQV5DQwDLNl88xJbrfq9BmDkZ9
w4VJ0newZRZkmopk5sWPFUw+VvFVHhADlVLBzIzQn3RVfNaZmKb3Dvl4Y2716Ish
4ZzuBzYDdEcQmhPxgmjdaFMTT1ioAzsrebwvVG4HYKfvkMmYgGlfMF5No6VHTQV0
JV2lGreESXe7sjrA7octgig9H3Uw/lcZSPpA3bbpKC5hjpO8pCb46bDzbQfMiDiT
aCz2hjyHclPsciyvfk7w9YV0zfNTv6FZ5Rd2e3V1ZEnicKc0qi9Nbg+ePwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAmx3HICqitAa61Z92xUVL1f9FyqMB8GA1UdIwQY
MBaAFFHaPTJZe1BRky9sqRgtS5ovsFtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWRvOU1sbDdVRkdUTDJ5cEdDMUxtaS13VzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jMjJhM2UtZmNkYi00YTcxLTg5NzYt
MDBhNTQ5ZTFiMWQ3LzEvQ2JIY2NnS3FLMEJyclZuM2JGUlV2Vl8wWEtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jMjJhM2UtZmNkYi00YTcxLTg5NzYtMDBhNTQ5ZTFiMWQ3
LzEvVWRvOU1sbDdVRkdUTDJ5cEdDMUxtaS13VzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwbLoMA0G
CSqGSIb3DQEBCwUAA4IBAQCqscCCv2dNMaCpGRp8/gS7iP0PCojJ3z5TZ7HwQT5p
4i+y2J3I6XULuZgonpi7U+7RmDTDuFtoK8COZbJF6ismjxneqSBfAmhJPLP9igpH
0UvyixxQZxfcx7LuUF2Uc6iGo0oRh3GMpHrAOKnl650Z+DTcSKePoKWUl+fq7jqC
f/wW90IVqvCIRdsdpEQVM5SDp+vbMsVv62ruQlB37B1AIZMYwsGrOc92fcjsbqjC
LbLiTTEqK63lfBioq9cJeV3JhHftepChwNZhNXI5glPh5OJ0XQ6ZUCJW/draeDtC
llPhZLBZmFKn1DqppPBOxrJ6198G3CbPunU9SWXaJ+8O
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:48 2024 by rpki-client on console-fra.rpki-client.org